https://github.com/simeononsecurity/apache-web-server-hardening
An collection of example configurations and scripts to aid administrators in configuring a hardened Apache Web Server
https://github.com/simeononsecurity/apache-web-server-hardening
apache encryption hardening security ssl-certificates
Last synced: 9 months ago
JSON representation
An collection of example configurations and scripts to aid administrators in configuring a hardened Apache Web Server
- Host: GitHub
- URL: https://github.com/simeononsecurity/apache-web-server-hardening
- Owner: simeononsecurity
- License: mit
- Created: 2020-07-27T17:10:38.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2020-08-02T09:37:17.000Z (over 5 years ago)
- Last Synced: 2025-04-23T05:57:56.897Z (9 months ago)
- Topics: apache, encryption, hardening, security, ssl-certificates
- Language: Shell
- Homepage: https://simeononsecurity.com/posts/hardening-apache/
- Size: 9.77 KB
- Stars: 9
- Watchers: 4
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Hardening Apache Web Servers
### A collection of example configurations and scripts to aid system administrators in hardening Apache web servers.
Apache, out of the box, is surprisingly insecure. Many best practices and security configurations have to be configured manually before rolling Apache out in a production environment. You may use this GitHub repository as a starting point towards securing your Apache instances.
### ModSecurity
We'll start with one of the most important changes, implementing ModSecurity with OWASP ModSecurity configurations.
Please read [this](https://github.com/simeononsecurity/Apache-Web-Server-Hardening/tree/master/Configurations/ModSecurity%20with%20OWASP%20Core%20Rule%20Set) for instructions.
### SSL Certificates
#### Self Signed
Please read [this](https://github.com/simeononsecurity/Apache-Web-Server-Hardening/tree/master/Configurations/Self-Signed%20SSL%20Certificate) for instructions.
#### Automate with LetsEncrypt and Certbot
Please read [this](https://github.com/simeononsecurity/Apache-Web-Server-Hardening/tree/master/Configurations/Automate%20SSL%20with%20Certbot) for instructions.